An organization is moving to continuous delivery. Which security-program adaptation is most useful?

1. Remove all validation to preserve deployment speed
2. Retain only an annual final-release review
3. Require every developer to wait for the board before each line of code
4. Integrate repeatable security checks and accountable risk decisions into the delivery pipeline